41 matches found
CVE-2026-75584
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsecutil.c passes bundle-payload.length to zcoclone without...
CVE-2026-75584 ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsecutil.c passes bundle-payload.length to zcoclone without...
CVE-2026-75584 ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsecutil.c passes bundle-payload.length to zcoclone without...
CVE-2026-75584
ION-DTN before 4.2.1-a.1 contains a denial-of-service vulnerability in the canonicalizePayloadBlock() function in bpsec_util.c . The function passes bundle->payload.length to zco_clone() without validating it against zero. An unauthenticated remote attacker can send a BPv7 bundle with a zero-l...
EUVD-2026-75456
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsecutil.c passes bundle-payload.length to zcoclone without...
PT-2026-89421
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsec util.c passes bundle-payload.length to zco clone without...
CVE-2026-75584: Reachable Assertion
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsecutil.c passes bundle-payload.length to zcoclone without...
SUSE CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
UBUNTU-CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674 Access of Uninitialized Pointer in Wireshark
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674 Access of Uninitialized Pointer in Wireshark
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674: Access of Uninitialized Pointer
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
Wireshark 缓冲区错误漏洞
Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark version 4.6.0 suffers from a buffer overflow vulnerability that stems from a BPv7 pars...
Wireshark 4.6.x < 4.6.1 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.1 advisory. - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service CVE-2025-13499 No...
CVE-2025-61910: Memory Allocation with Excessive Size Value
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...
EUVD-2024-50601
Malicious code in bioql PyPI...